mTLS for webhook proxy

For Workers & Pages, what is the name of the domain?

N/A

What is the issue or error you’re encountering

N/A

What steps have you taken to resolve the issue?

N/A

What are the steps to reproduce the issue?

I am hosting a webhook endpoint outside CF. have created a CF worker proxying incoming requests down to my backend. all good.

catch: the CF proxy needs to be mTLS and I understand this is only possible on the enterprise plan? the third party (calling my endpoint) provides a public certificate which I need to upload to my infrastructure. the docs suggest that custom certificates in mTLS are only available in enterprise:

side note: they often mention “devices” as the docs seem to be tailored for IoT but the underlying mTLS handshake is the same. I assume the “client certificate” in my scenario is the third party’s certificate calling my webhook.

is my understanding about the enterprise requirement correct?